Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/2bDoBg8AHgsXOylvHXm0V6coZLg.roa
File: 2bDoBg8AHgsXOylvHXm0V6coZLg.roa (raw, json)
Hash identifier: 3JpcrbCJn4CWxMtRa3H6JJJol/R6A1Ls6GTp8kiBnZI=
Subject key identifier: D9:B0:E8:06:0F:00:1E:0B:17:3B:29:6F:1D:79:B4:57:A7:28:64:B8
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 17C5
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2bDoBg8AHgsXOylvHXm0V6coZLg.roa
Signing time: Wed 12 Feb 2025 01:37:03 +0000
ROA not before: Wed 12 Feb 2025 01:37:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 220.128.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6085 (0x17c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:37:03 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D9B0E8060F001E0B173B296F1D79B457A72864B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:79:5e:52:ea:bb:81:05:d2:4d:14:a4:64:
36:c7:e2:44:18:90:18:0f:33:02:47:1e:9d:c3:b4:
86:be:b9:6b:40:65:23:cf:8b:46:8a:f9:d7:2a:a3:
39:62:7f:70:19:e0:4e:fe:8b:b8:75:8c:27:f0:94:
bc:54:49:99:5a:4e:7e:99:b3:c9:19:b5:38:38:4f:
0f:97:8f:fe:b5:56:85:61:5b:8e:40:99:6e:da:fe:
51:59:56:f6:79:4f:e4:f3:0c:2a:0b:58:83:6d:89:
2e:e7:7a:06:a3:0a:80:4a:62:7a:ec:50:5d:49:68:
00:a9:91:a5:e6:59:1f:1e:84:66:c0:0d:23:1c:ee:
23:79:cd:75:d9:ff:80:c8:8d:46:c6:95:f3:a4:6a:
4b:48:e1:8d:45:9c:36:c0:f0:82:4a:5d:2c:75:15:
30:2b:f4:39:f2:3b:ce:0d:3b:ed:96:44:07:51:80:
44:13:6d:9a:fa:15:dc:10:02:93:24:b8:4c:66:7a:
40:af:a7:37:52:6f:e4:0a:f2:16:b9:9a:3e:2b:fd:
fe:2d:73:d2:18:10:8d:d1:bc:58:13:6a:57:de:5e:
1d:e7:06:de:b9:28:6b:7e:89:06:e7:66:93:01:33:
45:63:a9:ae:18:a2:20:78:d1:81:1b:6b:86:40:bb:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B0:E8:06:0F:00:1E:0B:17:3B:29:6F:1D:79:B4:57:A7:28:64:B8
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2bDoBg8AHgsXOylvHXm0V6coZLg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.64.0/18
Signature Algorithm: sha256WithRSAEncryption
30:f3:ee:34:b1:c2:0b:8b:76:97:29:e8:e4:4e:89:a0:04:51:
42:3a:3d:82:2a:d9:4f:12:99:ed:cc:0b:11:51:11:bf:de:d9:
04:9e:9f:e3:3e:1c:30:12:65:00:29:dd:26:3b:0c:df:a4:7c:
35:42:7b:8b:b4:dd:1b:d3:07:9c:c5:0e:05:9a:ef:37:4f:9b:
5f:e6:8e:50:22:77:aa:37:ef:2b:fa:9e:d6:42:d6:0a:e8:2e:
bf:a5:b8:9f:cb:d2:f9:ea:45:78:c2:0c:6f:b8:36:4f:43:f0:
bd:c8:2d:b2:fc:14:de:f7:4b:5e:1f:96:d3:b4:b3:de:17:52:
da:a2:1a:a1:2a:47:be:26:74:b1:73:e5:ff:69:43:b7:37:92:
f4:41:33:fc:18:1e:90:4e:06:e0:02:ec:f7:cf:26:8c:4a:3a:
b3:9c:43:34:e9:70:09:56:48:47:94:cd:5c:ee:3c:93:c9:57:
4d:8e:59:f6:7f:77:02:86:12:e0:c7:94:58:66:11:b6:ec:07:
11:35:49:0e:68:5d:68:cb:3b:18:4d:8e:e1:5f:b5:f2:86:f4:
25:d7:53:c2:f5:c6:b6:9d:f4:8f:8f:aa:d9:c8:27:c6:f6:5f:
5b:d2:8b:b8:f8:b2:6e:86:6c:20:39:54:bb:b4:af:54:0c:8a:
fd:ec:bd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:02:52 2025 by rpki-client